During the past two weeks or so, I’ve noticed a significant increase in malicious spam (malspam) with attached zip archives disguised as delivery notices from the United Parcel Service (UPS).  These zip archives contain JavaScript files designed to download and install NemucodAES ransomware and Kovter malware on a victim’s Windows computer.  My Online Security reported on this recent wave of malspam late last month, and it’s been fairly constant since then.

https://isc.sans.edu/forums/diary/NemucodAES+and+the+malspam+that+distributes+it/22614/